
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
File: 4sshHyk-VOhOPL2dIrCIRnW7HGM.mft (raw, json)
Hash identifier: Y5eX6lgwAAcr6I3E5tD+Jm2Ym8AwN7xE3M1wQ1EBngg=
Subject key identifier: 7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73
Authority key identifier: E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
Certificate issuer: /CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63
Certificate serial: 2F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
Manifest number: 0C18
Signing time: Thu 26 Mar 2026 09:26:11 +0000
Manifest this update: Thu 26 Mar 2026 09:26:11 +0000
Manifest next update: Fri 10 Apr 2026 09:26:11 +0000
Files and hashes: 1: 4sshHyk-VOhOPL2dIrCIRnW7HGM.crl (hash: imH1BmOvgbbBjoMNZndn0QUXKhD7f1GkGpaEYh/1uoM=)
2: 72UaZooY1G2fRXCBBUfj241xmwY.roa (hash: 9sRRSklVmGP3oThgI6PAzsFvQEaOe7+M6m0fiNQGLf4=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2CB211F293E54E84E3CBD9D22B0884675BB1C63
Validity
Not Before: Mar 15 01:36:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7C62183761D873BF23C828A216BCE2113DD8E673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:2f:41:c9:a5:54:99:3e:2f:ac:f4:fe:ed:
59:a2:65:4e:98:e3:0d:f9:28:8a:8c:3c:9a:9b:4c:
49:65:5d:b6:5d:02:ed:51:3f:78:e7:e6:8f:bf:a6:
c0:bc:7d:44:ff:33:27:8b:a6:41:47:06:49:1a:28:
d9:6c:35:a7:34:3e:97:37:95:90:14:e5:fd:88:6f:
be:83:2d:ba:8d:94:b6:50:a6:10:c2:a0:d3:23:68:
5b:65:26:ce:6d:9b:13:c7:d0:d1:9e:15:1f:14:25:
3b:20:58:41:f4:de:30:62:fc:42:6c:fa:1e:4c:ca:
ac:8b:2d:15:fd:93:b9:73:0d:0e:4e:31:01:cc:d8:
14:79:c7:96:2d:af:34:65:4e:3b:bf:aa:20:62:77:
b7:5d:b4:56:cc:43:f5:d8:a4:2a:ec:7f:a4:c6:78:
58:08:5d:64:50:15:8c:6b:54:b5:6a:39:5b:96:2e:
2d:91:8c:cd:94:cf:a2:9b:dd:1c:ef:11:ce:02:c6:
56:9c:40:59:3b:49:a9:b9:4d:50:d8:43:63:94:98:
57:88:6b:b1:2d:5b:93:1c:4d:c8:15:78:ac:f6:57:
8f:cb:29:00:7e:a5:b4:14:e1:55:9b:e2:f2:9c:61:
ac:78:c8:0d:c8:17:da:9a:0a:49:3d:da:5a:34:36:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:18:37:61:D8:73:BF:23:C8:28:A2:16:BC:E2:11:3D:D8:E6:73
X509v3 Authority Key Identifier:
keyid:E2:CB:21:1F:29:3E:54:E8:4E:3C:BD:9D:22:B0:88:46:75:BB:1C:63
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4sshHyk-VOhOPL2dIrCIRnW7HGM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30406/4sshHyk-VOhOPL2dIrCIRnW7HGM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:10:63:be:3c:8c:86:a2:bb:a3:13:59:34:bf:45:13:3c:2f:
c3:7c:0c:5a:ef:41:39:af:0d:55:dc:69:0a:ff:f2:44:1c:51:
22:0e:c9:8d:c1:16:d2:11:eb:7b:9d:1d:5f:bc:f7:de:3e:c0:
1c:e0:34:01:e2:a3:49:5e:f2:5d:49:2c:fe:e8:69:c9:83:5b:
84:9c:c0:0c:28:d5:08:f8:bc:b4:58:c4:a1:ce:eb:54:25:1f:
ba:ef:7d:21:31:49:7f:31:a9:aa:8d:e0:f0:48:76:26:be:30:
35:ac:d7:89:76:a0:53:62:7c:d5:a2:3f:c4:4b:d8:90:6a:b7:
db:64:33:77:1a:a7:ab:de:23:5f:90:32:33:dd:63:01:e6:41:
43:3b:60:53:4f:65:e6:e6:30:ec:47:1d:df:9a:d8:15:10:3e:
3d:27:54:ee:3a:a0:56:0e:00:fc:15:ed:12:b5:96:c3:29:78:
75:b2:f3:57:7d:d4:4e:a1:28:aa:39:50:fd:5d:fa:5a:26:8f:
1d:d0:94:08:fc:6b:32:b4:e0:b8:2f:25:8a:9d:da:b9:fe:8f:
5e:a7:ee:bc:0b:d6:20:f4:84:25:b0:77:95:ec:d3:a4:3b:a5:
da:37:aa:2e:70:14:26:77:41:0b:6b:44:52:12:f2:39:a3:cf:
87:12:70:b0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkNC
MjExRjI5M0U1NEU4NEUzQ0JEOUQyMkIwODg0Njc1QkIxQzYzMB4XDTI2MDMxNTAx
MzYxNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0M2MjE4Mzc2MUQ4NzNC
RjIzQzgyOEEyMTZCQ0UyMTEzREQ4RTY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOaDL0HJpVSZPi+s9P7tWaJlTpjjDfkoiow8mptMSWVdtl0C7VE/
eOfmj7+mwLx9RP8zJ4umQUcGSRoo2Ww1pzQ+lzeVkBTl/YhvvoMtuo2UtlCmEMKg
0yNoW2Umzm2bE8fQ0Z4VHxQlOyBYQfTeMGL8Qmz6HkzKrIstFf2TuXMNDk4xAczY
FHnHli2vNGVOO7+qIGJ3t120VsxD9dikKux/pMZ4WAhdZFAVjGtUtWo5W5YuLZGM
zZTPopvdHO8RzgLGVpxAWTtJqblNUNhDY5SYV4hrsS1bkxxNyBV4rPZXj8spAH6l
tBThVZvi8pxhrHjIDcgX2poKST3aWjQ2bT8CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBR8Yhg3YdhzvyPIKKIWvOIRPdjmczAfBgNVHSMEGDAWgBTiyyEfKT5U6E48vZ0i
sIhGdbscYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MDYvNHNzaEh5ay1WT2hPUEwyZElyQ0lSblc3SEdNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHNzaEh5ay1WT2hPUEwyZElyQ0lS
blc3SEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDA2LzRzc2hIeWstVk9oT1BMMmRJckNJUm5XN0hHTS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhEGO+PIyGorujE1k0v0UTPC/DfAxa70E5rw1V3GkK//JEHFEiDsmN
wRbSEet7nR1fvPfePsAc4DQB4qNJXvJdSSz+6GnJg1uEnMAMKNUI+Ly0WMShzutU
JR+6730hMUl/MamqjeDwSHYmvjA1rNeJdqBTYnzVoj/ES9iQarfbZDN3Gqer3iNf
kDIz3WMB5kFDO2BTT2Xm5jDsRx3fmtgVED49J1TuOqBWDgD8Fe0StZbDKXh1svNX
fdROoSiqOVD9XfpaJo8d0JQI/GsytOC4LyWKndq5/o9ep+68C9Yg9IQlsHeV7NOk
O6XaN6oucBQmd0ELa0RSEvI5o8+HEnCw
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:27:26 2026 by rpki-client